This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: ksf278MCLGQb6IQzjlZDQeQ0QifpuyVqTBXbTDHbFR8= Subject key identifier: 5D:A2:C9:DB:FE:E5:F1:FE:7B:FB:1C:65:B2:D1:58:5E:59:FD:01:62 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 18:22:33 +0000 Manifest this update: Sat 06 Dec 2025 18:22:32 +0000 Manifest next update: Sat 13 Dec 2025 18:22:32 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: GV7nVhwB6M/cx434UFs+FXRN+p6ac0xokXMMt0qNgMw=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: +N5jmkplHBxyDznfmd7ebgnemm9ct5hvDRURAbbUFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Dec 6 18:22:32 2025 GMT Not After : Dec 13 18:22:32 2025 GMT Subject: CN=69347469-ee4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:16:3f:49:09:2c:e3:90:3a:b7:4c:6e:68: 8f:cd:ac:2d:79:97:27:db:42:71:bb:0a:08:b1:c2: 89:be:3e:ff:67:af:45:22:be:3b:ab:cb:e0:31:d4: ab:a4:6a:f6:eb:1e:88:b8:f0:20:e5:21:25:43:63: 99:01:83:44:92:ec:51:d1:91:5e:99:0d:f4:3e:b7: 4d:2f:f3:9a:67:a9:de:18:f3:7b:dd:cf:f8:6f:58: fd:68:ca:5d:a2:e6:46:8b:59:ba:0a:14:2c:58:87: 76:ce:e1:20:0a:24:95:06:a0:c8:14:93:4e:12:de: 1b:4b:6d:4a:f5:19:95:53:9a:6d:bd:eb:07:6e:a3: e0:e7:5c:2d:c6:98:71:66:3a:84:88:83:13:d5:7a: 7f:06:ee:02:b0:b5:f9:19:6d:27:14:b8:ed:a2:bb: 7a:0d:27:d1:57:8d:c0:72:fb:93:97:31:b7:a9:9e: 1c:c3:9b:b3:0a:9a:17:93:ca:c7:34:98:20:45:84: ff:c2:5a:2f:63:20:92:17:82:dc:9f:78:32:4d:79: 28:32:09:6c:bd:02:d2:37:9f:ee:1b:f3:2f:ea:c6: 16:0e:01:a5:ff:5e:71:ce:fb:ca:bb:32:3c:80:cb: a9:a8:ef:34:2c:36:d0:a4:db:72:df:80:8b:84:08: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A2:C9:DB:FE:E5:F1:FE:7B:FB:1C:65:B2:D1:58:5E:59:FD:01:62 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:79:bf:71:53:81:1d:b9:47:73:cd:b8:01:70:3c:00:d4:50: c1:cc:91:6e:8e:bf:12:b9:49:c9:cf:cf:28:ed:dc:72:a0:71: 3e:07:da:c7:2a:23:5b:bc:1e:1d:32:a4:10:ca:47:e4:04:e1: 4e:53:90:1f:1f:04:4a:87:84:50:3d:c6:f5:f0:64:14:16:db: 83:55:d3:0b:30:3c:dd:68:d5:73:de:bc:03:eb:aa:cb:ab:c2: c4:4f:60:d6:9c:55:71:dc:35:2d:58:08:18:98:d2:be:2b:11: 95:75:8d:f8:d7:77:ca:35:95:17:9e:e7:07:cd:42:dd:50:24: ab:8a:de:b5:ce:ce:02:17:fc:6b:8f:6d:0e:66:dd:40:f2:09: 03:76:ea:bd:97:b7:16:99:32:cc:3c:70:0c:4a:a3:b1:a5:50: e5:69:37:1c:7a:ca:93:53:d4:34:53:a4:51:5b:d3:35:ae:e9: 9c:78:0a:e2:79:3a:28:b7:97:3a:6c:c4:f4:1a:aa:b5:c7:55: 79:24:1b:b1:95:74:c0:44:9b:86:e4:b3:f0:cc:a8:24:f6:70: 82:66:2a:5e:2e:a1:12:39:b4:35:f6:57:c2:2b:7e:df:72:ca: 54:89:d5:8d:37:19:fd:09:e7:47:7f:4d:3b:5b:9b:a8:91:b4: e9:ad:23:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUxMjA2MTgyMjMyWhcNMjUxMjEzMTgyMjMyWjAYMRYwFAYD VQQDEw02OTM0NzQ2OS1lZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnwWP0kJLOOQOrdMbmiPzawteZcn20JxuwoIscKJvj7/Z69FIr47q8vgMdSr pGr26x6IuPAg5SElQ2OZAYNEkuxR0ZFemQ30PrdNL/OaZ6neGPN73c/4b1j9aMpd ouZGi1m6ChQsWId2zuEgCiSVBqDIFJNOEt4bS21K9RmVU5ptvesHbqPg51wtxphx ZjqEiIMT1Xp/Bu4CsLX5GW0nFLjtort6DSfRV43AcvuTlzG3qZ4cw5uzCpoXk8rH NJggRYT/wlovYyCSF4Lcn3gyTXkoMglsvQLSN5/uG/Mv6sYWDgGl/15xzvvKuzI8 gMupqO80LDbQpNty34CLhAha5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2iydv+ 5fH+e/scZbLRWF5Z/QFiMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8eb9xU4EduUdzzbgBcDwA1FDBzJFujr8SuUnJz88o7dxyoHE+B9rH KiNbvB4dMqQQykfkBOFOU5AfHwRKh4RQPcb18GQUFtuDVdMLMDzdaNVz3rwD66rL q8LET2DWnFVx3DUtWAgYmNK+KxGVdY3413fKNZUXnucHzULdUCSrit61zs4CF/xr j20OZt1A8gkDduq9l7cWmTLMPHAMSqOxpVDlaTccesqTU9Q0U6RRW9M1rumceAri eToot5c6bMT0Gqq1x1V5JBuxlXTARJuG5LPwzKgk9nCCZipeLqESObQ19lfCK37f cspUidWNNxn9CedHf007W5uokbTprSMn -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:51 2025 by rpki-client